A security analyst is investigating a suspected VM escape on a virtualized server. The hypervisor logs show unusual network traffic from a VM to the hypervisor's management interface. The analyst must determine whether a VM escape actually occurred. Which action would provide the STRONGEST evidence?

Check the physical host's BIOS logs for firmware changes

Run an antivirus scan inside the VM

Review the hypervisor's audit logs for privileged command execution

Check the VM's guest OS logs for unauthorized user logins

A company wants to run multiple isolated applications on a single Linux server without the overhead of full virtual machines. Each application has different dependencies and must not interfere with each other. Which virtualization approach is most suitable?

Server virtualization with multiple VMs

Application virtualization using containers

A company's virtualization administrator notices that developers frequently create new virtual machines for testing and rarely delete them, leading to hundreds of idle VMs consuming resources. Which combination of controls would best address this issue?

Move all VMs to a public cloud provider

Increase the hypervisor's memory allocation and CPU count

Disable the ability to create snapshots on all VMs

Implement a VM lifecycle policy with automated expiration and resource quotas

Which practice is an effective mitigation against VM sprawl?

Disabling snapshots to save storage

Allowing any user to create VMs without approval

Implementing a lifecycle management policy with regular reviews and decommissioning of unused VMs

Increasing the number of hosts in the cluster

A small business wants to use a cloud-based email and collaboration suite without any IT administration overhead. They need the provider to handle all maintenance, security, and availability of the service. Which cloud service model should they choose?

Infrastructure as a Service (IaaS)

EC-CouncilCertified Cybersecurity Technician

Domain 4Objective 1

Virtualization and Cloud Computing CCT Practice Questions (Page 6)

Part of the Cloud, Wireless, Mobile, and IoT/OT Security domain, which makes up ~17% of our current practice bank.

41questions here

9free pages

8concepts

Questions 26–30

26expert · hard
A security analyst is investigating a suspected VM escape on a virtualized server. The hypervisor logs show unusual network traffic from a VM to the hypervisor's management interface. The analyst must determine whether a VM escape actually occurred. Which action would provide the STRONGEST evidence?
Select an answer first
27application · medium
A company wants to run multiple isolated applications on a single Linux server without the overhead of full virtual machines. Each application has different dependencies and must not interfere with each other. Which virtualization approach is most suitable?
Select an answer first
28application · medium
A company's virtualization administrator notices that developers frequently create new virtual machines for testing and rarely delete them, leading to hundreds of idle VMs consuming resources. Which combination of controls would best address this issue?
Select an answer first
29foundation · easy
Which practice is an effective mitigation against VM sprawl?
Select an answer first
30application · medium
A small business wants to use a cloud-based email and collaboration suite without any IT administration overhead. They need the provider to handle all maintenance, security, and availability of the service. Which cloud service model should they choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.